Privacy policy

1. Controller and contact

The controller for this application is AK Easy Rich Mind LTD., Pentadaktilou Street 3, 7081 Larnaca, Cyprus, represented by Director Anja Krüger.

For privacy questions, access requests and deletion requests, contact us at info@easyrich-marketing.com. Further company details are available in the legal notice.

2. The data we process and why

• •Account and collaboration: name, email address, sign-in status, workspace membership, roles and invitations so that you can use the studio and, where applicable, a team account.
• •Projects: your texts, images, person reference images, video and audio files, as well as transcripts, settings, thumbnails, titles, descriptions and rendered Shorts. We process this data for the functions you start.
• •Operation and security: technical connection data such as IP address, browser information and access time, as well as job status, errors, usage events and security events. We use this data to operate the application, investigate errors and misuse, and measure the use of its functions.
• •Contract and support: plan, usage allowances, payment and invoice status, and your messages and how they are handled. Referrals also involve an affiliate code, visitor identifier and, where applicable, landing path.

Account data is required for a user account. Without a source file, we cannot analyse a video or create Shorts from it. A YouTube connection is not required for this.

3. Legal bases

We rely on Article 6(1)(b) GDPR to provide your account, process media at your request, provide support and perform the contract. We process billing and evidentiary records required by law under Article 6(1)(c) GDPR.

For system security, error diagnosis and the prevention of misuse, we rely on Article 6(1)(f) GDPR. Our legitimate interest is a secure, functioning service. Where processing is based on your consent, such as the optional authorisation to access Google data, Article 6(1)(a) GDPR applies. You can withdraw your consent with effect for the future.

4. Files and AI processing

You use your own uploaded video file for video analysis and Shorts. You can also use text and your own images for thumbnails. The AI services used are Google Gemini and OpenAI. Depending on the function, video segments with sound, audio, transcripts, text, instructions and reference images are sent to the relevant service to generate analyses, transcripts, suggestions or images.

Images of people may contain personal data. Only upload content that you are entitled to have processed for this purpose. The application uses person reference images for image creation, not for sign-in or identity verification.

After analysis, the studio initiates deletion of files temporarily provided through the Gemini Files API. A failed deletion request may delay removal. Processing by providers is not generally storage-free. Provider information: Gemini API terms and OpenAI privacy policy.

Uploading to the studio does not automatically transfer your video to YouTube. File processing does not require a channel connection.

5. Google sign-in and YouTube API Services

When you sign in with Google, we receive your Google account identifier, email address and the profile information provided by Google, such as your name and profile image. We do not receive your Google password.

If you optionally connect a channel, the application uses YouTube API Services. We process the permissions granted, encrypted access tokens, and channel and video information, such as identifiers, titles and preview images. This data is used to display your connection, select the correct channel and video, and carry out confirmed transfers.

The YouTube permissions requested are youtube.readonly to read the required channel and video information and youtube.upload for uploads. Available transfers include thumbnails, selected rendered Shorts and, where enabled in the studio, original videos. The selected file, title, description and publication settings you confirm are sent to YouTube.

YouTube is not used as a source for downloading or analysing videos and captions. Nothing is published to YouTube automatically. Every upload or change to YouTube content requires an explicit action and confirmation.

OAuth access tokens for the channel connection are stored encrypted. Account and YouTube data retrieved through Google APIs is not sold, used for third-party advertising or used to train general AI models. We use this data for the functions described that you choose to use. It is only shared to the extent necessary and permitted for those functions, security purposes or legal obligations.

Use and transfer of information received from Google APIs is subject to the Google API Services User Data Policy, including the Limited Use requirements. The Google privacy policy also applies to Google and YouTube.

6. Recipients and access

We use hosting and infrastructure services to operate the application. For paid bookings, Stripe processes the contact details, contract identifiers and payment information needed for checkout, payment and billing. See the Stripe privacy policy for details.

Sign-in, contract and service messages are sent through our mail server or, depending on the delivery configuration, Resend. This involves processing the recipient address, subject and message text. We store the delivery status locally. Information about Resend is available in the Resend privacy policy.

In shared workspaces, authorised members have access according to their role. Authorised administrators may access account data and content for support and troubleshooting. Support sessions are time-limited and logged. Access to Google data is also subject to the Limited Use requirements described above.

Google, OpenAI and Stripe operate internationally. Processing outside the EU or EEA, particularly in the United States, is possible. Such transfers are subject to the requirements of Articles 44 et seq. GDPR. You can ask our privacy contact about the recipients used for your processing and the grounds for those transfers.

7. Cookies and local browser storage

For sign-in, the studio sets the ets_session cookie with a lifetime of up to 30 days. ets_oauth_state secures the Google sign-in flow for up to ten minutes. Support sessions and the ets_admin_session return cookie are limited to one hour.

When you open a valid referral link, ets_affiliate is set for up to 60 days and ets_visitor for up to 365 days to attribute the referral. These identifiers are not used for Google or YouTube sign-in.

We also use local browser storage for your display preference, dismissed notices, file upload resumption details and title and description drafts. Not all of these entries expire automatically, and they may remain after you sign out. You can remove them through your browser's site data settings; doing so removes local drafts and upload resumption details.

8. Retention and deletion

Original videos and temporary source files are scheduled for cleanup after 4 days. Jobs in progress may postpone physical deletion until a later cleanup run. This period does not apply universally to transcripts, project information, finished thumbnails or saved Shorts. Keep your own copies of your originals.

Project information and finished results remain stored for use in your workspace until they are deleted. When an account is deleted, account data is deleted or anonymised. Content in a shared workspace may remain available to its other members following an ownership transfer. Technical file cleanup and the expiry of backup copies may occur later.

Billing records are retained where required by statutory retention obligations. We retain security and evidentiary data to the extent needed to investigate errors, prevent misuse, or establish or defend legal claims. A hashed identity record may also remain for these purposes after account deletion.

9. Disconnecting, requesting data and deleting your account

You can disconnect YouTube in the studio. This disables local access and initiates revocation with Google. You can also revoke access directly in your Google Account permissions. Disconnecting alone does not delete videos already uploaded to YouTube or all stored connection and project data.

Account settings offer a data export and account deletion. The export contains stored data as JSON, not a complete media archive. If you cannot access the settings, for example after your access ends, or if you specifically want stored Google data deleted, write to info@easyrich-marketing.com. Your data protection rights apply regardless of your plan.

10. Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation; you may object to direct marketing at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

You may lodge a complaint with a data protection supervisory authority, particularly in the place of your habitual residence, place of work or the alleged infringement. You do not need to complain to us first.

Google Analytics and Tag Manager

If you allow analytics, we use Google Analytics 4 through Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to measure page visits, completed registrations and confirmed purchases. Tag Manager and measurement load only after your consent. Declining analytics leaves all features available.

We send sanitized page addresses without URL parameters, a general page title and technical measurement data. For registrations, we send the sign-in method (email or Google). For purchases, we send the product type, amount, currency, tax and a pseudonymous transaction identifier to prevent duplicate counting. Project content, names, email addresses and sign-in tokens are not sent as measurement values. Automatic form, search and content measurement and advertising personalization are disabled. Google also processes technical connection data. Processing in the USA may take place.

Google Analytics uses the cookies _ga and _ga_CCFLPW5GLF on the studio domain. Cookies can last for up to two years. Your choice is stored in your browser's local storage for 180 days. After consent, the ets_analytics_consent cookie stores the same preference so the server can check it. We also use ets_analytics_pending for up to 24 hours after consent to indicate pending events. We only count registrations and purchases for which consent was already given when registration completed or checkout started, and which are sent within 24 hours under the same consent choice. You can withdraw consent at any time through “Privacy settings”. This deletes the studio's analytics cookies and reloads the page to stop further measurement.

Google privacy policy and information about data processing in Google Analytics.

11. Further information

This policy covers the Content Studio. For other services at erfolgsladys.com, see the general privacy policy. The rules for using the studio are set out in the terms of use.